Xapian 1.4.32 released

Olly Betts via Xapian-discuss <[email protected]> Fri, 14 Aug 2026 10:02:59 +1200

Newsgroups	gmane.comp.search.xapian.general
Message-ID	<[email protected]>

Xapian 1.4.32 can now be downloaded from:

https://xapian.org/download

This is a bug-fix release.  It includes a xapian-core fix which
potentially has security implications, though is only possible to
exploit if the API is used in an uncommon way:

https://trac.xapian.org/wiki/SecurityFixes/2018-07-02#a2026-08-13update

(This bug also affects 2.0.0 - expect a 2.1.0 release with this fix a
few hours after this one.)

Now that 2.x is out we want to focus our development resources on that
so 1.4.x is firmly in maintenance mode.  We're not actively planning
further releases 1.4.x releases but may make them if it seems
appropriate.

The wiki has the usual summary of the most notable changes:

https://trac.xapian.org/wiki/ReleaseOverview/1.4.32

A big thanks to Arpit Jain, Sergei Trofimovich and Darrin Smart
for helping to make this release a reality.

If I've missed anyone out, you can claim an extra big thankyou.

As always, if you encounter problems, please report them here, or to
the bug-tracker: https://xapian.org/bugs

You can find detached GPG signatures for each of the release tarballs
in a corresponding file with ".asc" appended.

Here are the SHA256 checksums of the released files:

8434a307c16c264e93674dd360da7d2c2ffc00fa05440383c2e4ae971940b778  xapian-bindings-1.4.32.tar.xz
c4fd64e81127311756adf5579268d14a79f285ce8ac4ead0930c96195897aece  xapian-core-1.4.32.tar.xz
06b92a8edac947a655454efee2b460555661bb2e329af0c10d9b79cd1ee5860f  xapian-omega-1.4.32.tar.xz

Cheers,
    Olly

signature.asc (application/pgp-signature, 833 B)